CVE-2021-20016CISA KEVEPSS p98.6%

CVE-2021-20016SonicWall SSLVPN SMA100 SQL Injection Vulnerability

SonicWall / SSLVPN SMA100

Description

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.

Scoring

CVSS 9.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS40.04% probability of exploitation · percentile 98.6% · 2026-10-06T12:00:23Z
Last modified2026-08-12

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntrySonicWall SSLVPN SMA100 SQL Injection Vulnerabilitykev-cve-2021-200160%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
SonicWall SMA100 SQL Injection Vulnerability
CVE
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
CVE
SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
CVE
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
CVE
Sophos SFOS SQL Injection Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.